91–100 of 314 posts
Good document, but I was really hoping they’d go deeper into how they tested some of the fraud detection stuff (masks, etc) or give us some statistics on the twin/family member issue.
But so does your face if it's been wearing a balaclava in the cold (some parts will be cold and some will be warm...
Earlier quoted context omitted.
No, any kind of biometric auth is vulnerable to the adversary forcing your physical compliance. However you can disable TouchID and FaceID both by pressing the power button five times in quick succession, after which it will require your passcode.
5-clicks-in-quick-succession primarily activates the "Emergency SOS mode", as well as temporarily disabling TouchID. I think you should edit your post to reflect this.
Earlier quoted context omitted.
No, any kind of biometric auth is vulnerable to the adversary forcing your physical compliance. However you can disable TouchID and FaceID both by pressing the power button five times in quick succession, after which it will require your passcode.
This is woefully insufficient for a feature I have been begging for forever... I would prefer it to be a double-tap on the power button, or at the very absolute worse, a triple tap. Two buttons simultaneously five times? Impossible to do under any sort of external pressure/duress.
Power button 5x on any other phone.
The diagnostics section is super interesting.
[0] - It's previously been reported (https://techcrunch.com/2017/09/15/interview-apples-craig-fed...) that Apple collected this dataset at great expense. The ATP podcast has an account of someone who took part of that data collection here: https://overcast.fm/+CdQoBnmk/1:15:23
I'm genuinely interested in knowing how apple can tell that FaceID is better than TouchID - TouchID is already very fast - I can give access to someone else with TouchID without giving my password - It's unlikely that someone will be able to unlock my phone without me knowing it when using TouchID - In case of coercion, I still have the possibility to give the wrong fingerprint 9 times before the good one - I have to…
The real question to me, a person in the FR industry, will Apple iterate their camera hardware and extend the perception depth range to be competitive in the larger FR surveillance industry? The general FR industry has to recognize multiple people at a distance, and then IoT-like control other hardware, a game Apple is not touching with Face ID - yet.
"Face ID confirms attention by detecting the direction of your gaze" So to the argument that police can force you to open your iPhone if secured with TouchID, is this perhaps more secure? If you refrain from looking at your phone?
Here's what police do today, and it will defeat this and all types of security: Follow you until you make a phone call, or do something that requires you to unlock your phone. Then multiple people descend on you and grab you and your phone.
I'll bet most people who dismiss TouchID and FaceID as useless because they're "usernames" and not "passwords", have a bog standard lock and key on their house. Funny thing about those house keys. They can be stolen, lost, or duplicated from pictures. But TouchID and FaceID have liveness tests to prevent forgeries, your biometrics can't be easily stolen, and you can't lose them. A house key is called a "key" though,…
How would this work if you wear a burka for example (without having to "downgrade" to using a passcode, when the real alternative would have just been TouchID)? Or am I missing something... genuinely curious.
Earlier quoted context omitted.
> they are trying to sell a feature that is only due to their engineering team unable to put TouchID on the Iphone X I highly doubt it’s easier to add FaceID than TouchID to any phone.
I remember reading some articles about the difficulty to have a fingerprint sensor under a screen, it might well have been easier to have FaceID (easier does not mean easy)
I'll bet most people who dismiss TouchID and FaceID as useless because they're "usernames" and not "passwords", have a bog standard lock and key on their house. Funny thing about those house keys. They can be stolen, lost, or duplicated from pictures. But TouchID and FaceID have liveness tests to prevent forgeries, your biometrics can't be easily stolen, and you can't lose them. A house key is called a "key" though,…